Protection and Processing of Personal Data General Information

The scope of the data processing activity carried out by ISKUR acting in the capacity of data controller pursuant to the Law on the Protection of Personal Data (“Law”), is explained below:

What is the Methodology and the Legal Ground of Obtaining Your Personal Data?

Your personal data is collected via different methods, to conduct our activities and to ensure compliance with the relevant legislation and Company policies based on the legal requirements. Your personal data may also be processed and transferred in accordance with the fundamental principles regulated by the Law for the purposes set out under this Information Notice in accordance with the personal data processing requirements and purposes set forth in Articles 5 and 6 of the Law.

For What Purposes Do We Process Your Personal Data?

Within the scope of the purposes stated below and in accordance with the fundamental principles stated under the Law, and pursuant to the legal grounds and purposes of processing that are stated in Articles 5 and 6 of the Law, ISKUR may process your collected personal data:

To perform the necessary operations and transactions of our company, to ensure that we conduct our commercial activities in accordance with the legislation and Company policies;

To determine, plan and implement the short, medium and long term commercial policies of ISKUR;

To plan and perform human resources activities of ISKUR,

To give support to the ISKUR Group Companies for planning and executing their human resources activities;

To ensure the commercial and legal security of ISKUR, ISKUR Group Companies and the persons involved in business relations;

To protect the commercial standing of and trust created by ISKUR Group.

To Whom and For What Purposes Do We Transfer Your Personal Data?

Within the scope of the purposes stated below and in accordance with the fundamental principles stated under the Law, and pursuant to the legal grounds and purposes of processing that are stated in Articles 8 and 9 of the Law, your personal data may be transferred to our business partners, suppliers, ISKUR Group Companies, shareholders, public institutions, and private persons that are authorized by law:

To perform the necessary operations and transactions of our company, to ensure that we conduct our commercial activities in accordance with the legislation and Company policies;

To determine, plan and implement the short, medium, and long term commercial policies of ISKUR;

To plan and perform human resources activities of ISKUR,

To give support to the ISKUR Group Companies for planning and executing their human resources activities;

To ensure the commercial and legal security of ISKUR, ISKUR Group Companies and the persons involved in business relations;

To protect the commercial standing of and trust created by ISKUR Group.

What are Your Rights as a Data Subject Regulated under Article 11 of the Law?

In accordance with Article 11 of the Law, you are entitled to;

Learn whether your personal data are being processed,

Request further information if your personal data have been processed,

Learn the purpose of processing of your personal data and whether your personal data are being processed in accordance with such purpose,

Learn the third-party recipients to whom your personal data are disclosed within the country or abroad,

Request rectification of your personal data that is incomplete or inaccurate and to request notifying the third persons, to whom your personal data are disclosed, about the rectification process.

Despite being processed in accordance with the provisions of the Law or other related laws; request erasure or destruction of your personal data upon disappearance of the grounds of the process and request notifying the third persons, to whom your personal data are disclosed, about the erasure or destruction processes.

Object to negative consequences about you that arise as a result of analysis of your personal data made by solely automatic means,

Demand compensation for the damages that you have suffered as a result of an unlawful processing operation.

You may exercise your rights by filling out the Data Subject Request Form, which can be accessed via our website (www.iskur.com)

Depending on the content of your request, our Company shall conclude your request as soon as possible and within thirty (30) days at the latest free of charge. However, if this activity requires a cost, you will be charged from the rate determined by the Personal Data Protection Board.